Hey Kitamura, Technically speaking Openstack admin can create a flavor which has 1 vCPU and 16GB RAM however,
it’s recommended to have 1 vCPU per 4 GB of RAM. Openstack default vCPU ratio is 16 vCPUs per 1 physical Core. So for a proxy which use SSL-Bump it’s recommended to have more then 1 vCPU ie at-least 2 if not 4. All The Bests, Eliezer ---- Eliezer Croitoru Tech Support Mobile: +972-5-28704261 Email: ngtech1ltd@xxxxxxxxx From: squid-users <squid-users-bounces@xxxxxxxxxxxxxxxxxxxxx> On Behalf Of m k
Sent: Monday, August 17, 2020 2:12 PM
To: Amos Jeffries <squid3@xxxxxxxxxxxxx>
Cc: squid-users@xxxxxxxxxxxxxxxxxxxxx
Subject: Re: I would like to know performance sizing aspects. I built squid using SSL-bump. In addition, squid also authenticates users with active directory. The hardware is openstack virtual. os is centos8.1. There is one CPU. The memory is 16GB. The hard disk is SSD 200GB. I'm thinking of load testing with Apache Jmeter in this environment. I don't know the standard, so the test stops and I am in trouble. How many simultaneous connection sessions? How many requests per minute? On 6/08/20 5:28 pm, m k wrote:
> Eliezer,
>
> Squid's default setting is 1 core CPU, 16GB mem.
> How many URLs(Blacklist) will degrade Squid's performance?
>
Eliezer's answer covers that already, so I will skip here.
> Also, SSL-Bump.
>
This is "unknown" - as far as I am aware none has published numbers
recently about it. There are a lot of factors in the network traffic and
your servers internal state (eg the RNG engine) that multiply up to
cause varying amounts of delay - plus the volatile nature of this
feature set itself month by month changes the effects or relevance of
each factor.
So numbers from me today will be wrong in a few weeks, or may be wrong
for your network already. All that we can be sure of is that there is
extra work needed by Squid thus "slower" than plain-text HTTP is to be
expected.
For planning the consideration is just to be aware that the numbers we
can give you (for plain-text) will be over-estimates of capacity for
SSL-Bump traffic and allow some margins. Once you have an install
running you can test and measure the actual numbers for your traffic.
Amos
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
|
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
